On Mon, 2011-08-08 at 15:50 +0100, Michael Gliwinski wrote:
Hello all,
Is it safe to use ldbmodify / ldbdel to modify the LDB cache in
/var/lib/sssd/db/ ? Does the daemon need to be stopped?
It should be safe to do even while the daemon is running.
Obviously this is only for debugging, etc. I'm currently trying
to track down
a weird issue where SSSD is losing track of members of an LDAP group (i.e. all
member attribute values are OK in cache but only a subset or none of memberuid
values). I wanted to expire an entry by either deleting it or resetting
dataExpireTimestamp.
SSSD 1.6.0 now includes a tool for this: sss_cache. It can expire one
entry, all entries of a type (users, groups, netgroups) or all entries
of all types.